Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: M1AqmjPeQwU3eL+RpiTNo7xNRgSohxI2H3eyE5EadWc=
Subject key identifier: 0B:38:DB:3D:BA:F6:8B:50:87:D1:3E:70:A7:AC:4B:3A:17:E9:EC:5F
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 018F8DEF345F158E734B09C7087DD16EABF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 0B6B
Signing time: Sat 18 May 2024 23:00:14 +0000
Manifest this update: Sat 18 May 2024 23:00:14 +0000
Manifest next update: Sun 19 May 2024 23:00:14 +0000
Files and hashes: 1: IlCQJx8xLMLhsCHR8kwr_OetMas.roa (hash: d502BYgC2bUAyRLygERY9qfFU2gMH3hPaCsQ507G/W0=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: KC6B7JF36A8NaCwyI64oVhjW3k8srca2ktLYHCXYBJM=)
3: c6oLRU66wrhSElShcpzyrYmVC9s.roa (hash: bDum4vF00woux8f1xRWLlY0Rp9GNvV1NMSlcWnz16BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:ef:34:5f:15:8e:73:4b:09:c7:08:7d:d1:6e:ab:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: May 18 23:00:14 2024 GMT
Not After : May 19 23:00:14 2024 GMT
Subject: CN=0b38db3dbaf68b5087d13e70a7ac4b3a17e9ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:2e:d8:15:7a:85:e5:97:1a:36:27:c1:2a:
a8:89:f8:50:4f:1c:e6:c3:a0:af:0a:63:81:37:cd:
49:50:33:32:26:d1:cd:a5:55:ad:83:b5:56:3c:67:
75:86:d9:f0:2f:a9:47:c2:3e:8a:05:3a:65:ac:0d:
ea:76:be:65:4f:7b:36:13:47:02:18:0a:40:69:ce:
51:ae:ad:4d:15:80:e0:1d:b9:f7:ea:14:01:41:9e:
c1:b6:43:a7:bb:25:7b:4c:4d:cd:d0:ae:6f:0a:92:
13:eb:d1:1e:a8:6b:af:71:09:18:b1:9d:46:63:41:
80:a1:d0:c1:da:a5:b0:f6:9c:09:bf:43:df:ce:e1:
46:d5:25:77:17:19:30:53:88:ae:2d:64:d2:78:6f:
ad:d6:84:d2:db:e8:1d:70:43:45:bb:c0:8a:17:53:
bc:c5:21:ba:ef:ce:50:2e:dd:99:6c:0a:a3:72:8f:
64:57:ea:58:91:5b:58:f2:28:13:ea:f2:ae:61:7d:
3f:8c:16:c6:21:6e:a6:70:1c:42:d5:3e:c2:47:cc:
08:69:64:fa:e2:f6:0b:44:35:f9:f5:1b:fb:86:86:
6b:6b:d5:ba:46:d9:12:23:6a:34:fa:5d:67:62:ce:
73:1f:86:c3:08:df:0b:92:29:5b:9b:3b:82:67:c4:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:38:DB:3D:BA:F6:8B:50:87:D1:3E:70:A7:AC:4B:3A:17:E9:EC:5F
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:45:ff:c2:92:10:1d:4c:8d:ca:6a:e0:78:bd:da:77:be:5f:
b6:35:5f:a0:b7:b7:03:0f:7f:3a:17:f2:8b:ae:00:5f:da:1a:
7c:5c:ab:95:dd:4b:b7:f1:48:11:f9:22:6d:d6:76:35:91:f0:
3a:76:60:7f:6b:3b:03:d6:7f:2f:43:ce:db:9d:23:20:38:fd:
f1:14:d9:1a:4c:67:f5:e9:d1:bd:dd:2a:0a:e4:42:2f:aa:d9:
6f:82:8d:13:f9:65:cc:5b:c4:4c:b5:9d:23:d7:44:5b:2c:2f:
bc:21:c0:ff:d6:6e:3c:39:6a:19:01:82:3e:37:a8:35:02:19:
50:d0:54:95:c1:a3:52:7e:97:d7:08:0f:ee:03:c3:3b:10:80:
55:99:b7:b0:75:04:e6:43:b9:80:58:e4:f9:d9:53:cd:d8:05:
1e:03:2e:74:52:85:3f:e8:c7:ef:3c:a2:9c:04:b4:51:29:c4:
50:a6:f0:1c:51:f0:75:46:89:17:e3:e7:26:df:02:49:b0:aa:
97:86:ae:05:b3:5b:72:72:9e:f6:ea:d3:67:7f:c4:c8:85:54:
ee:78:f9:fe:29:76:4f:f5:8e:5e:ff:e1:a6:6c:62:bb:ea:7c:
86:f0:22:ca:63:31:0f:26:5a:95:43:9e:da:3c:ed:c7:a5:80:
77:00:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:41:40 2024 by rpki-client on console-ams.rpki-client.org